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Abstract. Threads as considered in thread algebra model behaviours 
to be controlled by some execution environment: upon each action per- 
formed by a thread, a reply from its execution environment - which takes 
the action as an instruction to be processed - determines how the thread 
proceeds. In this paper, we are concerned with the case where the execu- 
tion environment is remote: we describe and analyse some transmission 
protocols for passing instructions from a thread to a remote execution 
environment. 
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1 Introduction 

The behaviours produced by sequential programs under execution are behaviours 
to be controlled by some execution environment. The execution environment 
concerned is increasingly more a remote execution environment. The objective 
of the current paper is to clarify the phenomenon of remotely controlled program 
behaviours. 

Basic thread algebra [7], BTA in short, is a form of process algebra tailored 
to the description and analysis of the behaviours produced by sequential pro- 
grams under execution. 1 Threads as considered in basic thread algebra model 
behaviours to be controlled by some execution environment. Threads proceed 
by performing steps, called basic actions in what follows, in a sequential fashion. 
The execution environment of a thread takes the basic actions performed by the 
thread as instructions to be processed. Upon each basic action performed by 
the thread, a reply from the execution environment determines how the thread 
proceeds. To achieve the objective of the current paper, we study some trans- 
mission protocols for passing instructions from a thread to a remote execution 
environment. 

General process algebras, such as ACP [6,4], CCS [11, 13] and CSP [9, 12], 
are too general for the description and analysis of the behaviours produced by 



1 In [7], basic thread algebra is introduced under the name basic polarized process 
algebra. 



sequential programs under execution. That is, it is quite awkward to describe and 
analyse behaviours of this kind using such a general process algebra. However, 
the behaviours considered in basic thread algebra can be viewed as processes that 
are definable over ACP, see e.g. [8]. This allows for the transmission protocols 
mentioned above to be described and their correctness to be verified using ACP 
or rather ACP r , an extension of ACP which supports abstraction from internal 
actions. We consider first a very simple transmission protocol and then a more 
complex one that is more efficient. 

This paper is organized as follows. First, we give brief summaries of BTA 
(Section 2) and ACP T (Section 3). Next, we make mathematically precise the 
connection between behaviours as considered in BTA and processes as considered 
in ACP T (Section 4). After that, we describe and analyse the above-mentioned 
transmission protocols (Sections 5 and 6). Finally, we make some concluding 
remarks (Section 7). 

2 Thread Algebra 

In this section, we review BTA (Basic Thread Algebra). BTA is concerned 
with behaviours as exhibited by sequential programs under execution. These 
behaviours are called threads. 

In BTA, it is assumed that a fixed but arbitrary set A of basic actions has 
been given. A thread performs basic actions in a sequential fashion. Upon each 
basic action performed, a reply from the execution environment of the thread 
determines how it proceeds. The possible replies are the Boolean values T and F. 

To build terms, BTA has the following constants and operators: 

— the deadlock constant D; 

— the termination constant S; 

— for each a G A, the binary postconditional composition operator <a>. 

We assume that there are infinitely many variables, including x,y,z. Terms 
are built as usual. We use infix notation for the postconditional composition 
operator. We introduce basic action prefixing as an abbreviation: a o p, where 
a e A and p is a BTA term, abbreviates p < a > p. 

The thread denoted by a closed term of the form p < a > q will first perform 
a, and then proceed as the thread denoted by p if the reply from the execution 
environment is T and proceed as the thread denoted by q if the reply from the 
execution environment is F. The threads denoted by D and S will become inactive 
and terminate, respectively. This implies that each closed BTA term denotes a 
thread that will become inactive or terminate after it has performed finitely 
many basic actions. Infinite threads can be described by guarded recursion. 

A guarded recursive specification over BTA is a set of recursion equations 
E = {X = tx | X e V"}, where V is a set of variables and each tx is a BTA 
term of the form D, S or t <ja[> t' with t and t' that contain only variables 
from V. We write V(E) for the set of all variables that occur in E. We are 
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Table 1. Axioms for guarded recursion 



(X\E) = (t x \E) if X = t x £ E RDP 
E^>X = (X\E) \f X € V(E) RSP 



only interested in models of BTA in which guarded recursive specifications have 
unique solutions, such as the projective limit model of BTA presented in [5]. 

For each guarded recursive specification E and each X £ V(E), we introduce 
a constant (X\E) standing for the unique solution of E for X. The axioms 
for these constants are given in Table 1. In this table, we write (tx\E) for tx 
with, for all Y £ V(E), all occurrences of Y in tx replaced by (Y\E). X, tx 
and E stand for an arbitrary variable, an arbitrary BTA term and an arbitrary 
guarded recursive specification over BTA, respectively. Side conditions are added 
to restrict what X, tx and E stand for. 

In the sequel, we will make use of a version of BTA in which the following 
additional assumptions relating to A are made: (i) a fixed but arbitrary set T 
of foci has been given; (ii) a fixed but arbitrary set M of methods has been 
given; (iii) A = {f.m f £ T ,m £ M}. These assumptions are based on the 
view that the execution environment provides a number of services. Performing 
a basic action f.m is taken as making a request to the service named / to process 
command m. As usual, we will write B for the set {T, F}. 

3 Process Algebra 

In this section, we review ACP r (Algebra of Communicating Processes with 
abstraction). This is the process algebra that will be used in Section 4 to make 
precise what processes are produced by the threads denoted by closed terms of 
BTA with guarded recursion. For a comprehensive overview of ACP T , the reader 
is referred to [4, 10]. 

In ACP r , it is assumed that a fixed but arbitrary set A of atomic actions, 
with r, S £ A, and a fixed but arbitrary commutative and associative function 
| : A x A — > A U {6} have been given. The function | is regarded to give the result 
of synchronously performing any two atomic actions for which this is possible, 
and to give S otherwise. In ACP T , r is a special atomic action, called the silent 
step. The act of performing the silent step is considered unobservable. Because 
it would otherwise be observable, the silent step is considered an atomic action 
that cannot be performed synchronously with other atomic actions. 

ACP T has the following constants and operators: 

— for each e £ A, the atomic action constant e ; 

— the silent step constant r ; 

— the deadlock constant 6 ; 

— the binary alternative composition operator + ; 

— the binary sequential composition operator • ; 

— the binary parallel composition operator || ; 
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— the binary left merge operator [[ ; 

— the binary communication merge operator | ; 

— for each H C A, the unary encapsulation operator dn 

— for each JCA, the unary abstraction operator tj . 

We assume that there are infinitely many variables, including x,y, z. Terms are 
built as usual. We use infix notation for the binary operators. 

Let p and q be closed ACP T terms, e G A, and H, I C A. Intuitively, the 
constants and operators to build ACP T terms can be explained as follows: 

— e first performs atomic action e and next terminates successfully; 

— r performs an unobservable atomic action and next terminates successfully; 

— 5 can neither perform an atomic action nor terminate successfully; 

— p + q behaves either as p or as q, but not both; 

— p ■ q first behaves as p and on successful termination of p it next behaves 
as q; 

— p || q behaves as the process that proceeds with p and q in parallel; 

— p [[ q behaves the same as p || q, except that it starts with performing an 
atomic action of p; 

— p | q behaves the same as p \\ q, except that it starts with performing an 
atomic action of p and an atomic action of q synchronously; 

— 9h{p) behaves the same as p, except that atomic actions from H are blocked; 

— Ti(p) behaves the same as p, except that atomic actions from I are turned 
into unobservable atomic actions. 

The axioms of ACP T are given in Table 2. CM2-CM3, CM5-CM7, C1-C4, 
D1-D4 and TI1-TI4 are actually axiom schemas in which a, b and c stand for 
arbitrary constants of ACP T , and H and / stand for arbitrary subsets of A. 

A recursive specification over ACP T is a set of recursion equations E = 
{X =tx | X G V}, where V is a set of variables and each tx is an ACP T term 
containing only variables from V. Let t be an ACP T term without occurrences 
of abstraction operators containing a variable X . Then an occurrence of X in 
t is guarded if t has a subterm of the form e • t' where e G A and t' is a term 
containing this occurrence of X. Let E be a recursive specification over ACP T . 
Then £ is a guarded recursive specification if, in each equation X = tx G E: 
(i) abstraction operators do not occur in tx and (ii) all occurrences of variables 
in tx are guarded or tx can be rewritten to such a term using the axioms of 
ACP r in either direction and/or the equations in E except the equation X = tx 
from left to right. We only consider models of ACP T in which guarded recursive 
specifications have unique solutions, such as the models of ACP T presented in [4]. 

For each guarded recursive specification E and each variable X that occurs 
in E, we introduce a constant (X\E) standing for the unique solution of E for X . 
The axioms for these constants are RDP and RSP given in Table 3. In RDP, we 
write (tx\E) for tx with, for all Y G Y(E), all occurrences of Y in tx replaced 
by (Y\E). RDP and RSP are actually axiom schemas in which X stands for an 
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Table 2. Axioms of ACP T 



x + y = y + x Al 

(x + y) + z = x + (y + z) A2 

x + x — x A3 

(x + y)-z = x- z + y- z A4 

(x ■ y) ■ z = x ■ (y ■ z) A5 

x + 8 — x A6 

8 ■ x = 8 A7 



X ■ t — X Bl 
x-(r-(y + z)+y)=x-{y + z) B2 

d H (a) =a if o g Dl 

dif(a) =«5 if ae# D2 

8h(x + y) = dH(x) + dii(y) D3 

dn{x ■ y) = dn{x) ■ du(y) D4 



^llj/^^Ly + J/L^ + ^lj/ CM1 r/(o)=a ifa^JTIl 

a [[ x = a • £ CM2 r/(o) = r if a € / TI2 

a-x ty = a-(x\\y) CM3 r/(x + y) = n{x) + n(y) TI3 

(x + y)lz = xlz + ylz CM4 r/(x • y) = n{x) ■ n{y) TI4 

a ■ x | b = (a | 6) • x CM5 

a | b ■ x = (a | 6) • x CM6 a | & = b \ a CI 

a • x | 6 • y = (a \ b) ■ (x || y) CM7 (a \ b) \ c = a \ (b\ c) C2 

(a; + J y)|2 = 2 : |z + y|z CM8 5 | a = 8 C3 

x\(y + z)=x\y + x\ z CM9 r | a = 8 C4 



Table 3. RDP, RSP and AIP 



= (t x \E) if X = t x £ £ RDP 
E ^ X — (X\E) if X G V(i5) RSP 

A„>o K n (x) = Tv„(y) ^x = y AIP 



7r (a) = 5 PR1 

7Tn+i(a) = a PR2 

7ro(o • x) — 8 PR3 

7r n+ i(a • x) = a • 7r„(x) PR4 
ty„(x + y) — ty„(x) + 7r„(y) PR5 

7r„(r) = r PR6 

7r n (r ■ x) = r • 7r„(a;) PR7 



arbitrary variable, tx stands for an arbitrary ACP r term, and E stands for an 
arbitrary guarded recursive specification over ACP T . 

Closed terms of ACP with guarded recursion that denote the same process 
cannot always be proved equal by means of the axioms of ACP together with 
RDP and RSP. To remedy this, we introduce AIP (Approximation Induction 
Principle). AIP is based on the view that two processes are identical if their 
approximations up to any finite depth are identical. The approximation up to 
depth n of a process behaves the same as that process, except that it cannot 
perform any further atomic action after n atomic actions have been performed. 
AIP is given in Table 3. Here, approximation up to depth n is phrased in terms 
of a unary projection operator 7r„. The axioms for these operators are axioms 
PR1--PR7 in Table 3. PR1-PR7 are actually axiom schemas in which a stands 
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Table 4. Defining equations for process extraction operation 



|X| C = X 
|S| C = stop 
|D| C =i-<5 

|*i < f-m > t 2 \ c = s/(m) • (r,(T) ■ |ti| c + r/(F) • \t 2 \ c ) 

\(x\E)\° = (x\{Y = \t Y r\Y = t Y e E}) 



for arbitrary constants of ACP T different from r and n stands for an arbitrary 
natural number. 

We will write ~^2 ieS Pi, where S — {ii, . . . ,i n } and ■ ■ ■ iVi n are ACP T 
terms, for p il + . . . + p in . The convention is that ^2 ie sPi stands for 5 if S = 0. 
We will often write X for (X\E) if E is clear from the context. It should be 
borne in mind that, in such cases, we use X as a constant. 

4 Process Extraction 

In this section, we use ACP r with guarded recursion to make mathematically 
precise what processes are produced by the threads denoted by closed terms of 
BTA with guarded recursion. 

For that purpose, A and | are taken such that the following conditions are 
satisfied: 



ad {s f (d) | / g T,d e M ub} u {17(d) I / ef,rfeXul}u {stop, i} 

and for all / G T, d G M U B, and e G A: 
Sf(d) \v f (d) = i, 



The process extraction operation |_| determines, for each closed term p of 
BTA with guarded recursion, a closed term of ACP r with guarded recursion 
that denotes the process produced by the thread denoted by p. The process 
extraction operation |_| is defined by \p\ — T{ stop j (|p| c ), where |_| c is defined by 
the equations given in Table 4 (for / G T and m G M). 

Two atomic actions are involved in performing a basic action of the form f.m: 
one for sending a request to process command m to the service named / and 
another for receiving a reply from that service upon completion of the processing. 
For each closed term p of BTA with guarded recursion, \p\ c denotes a process 
that in the event of termination performs a special termination action just before 
termination. Abstracting from this termination action yields the process denoted 
by \p\. Some atomic actions introduced above are not used in the definition of 
the process extraction operation for BTA. Those atomic actions are commonly 



s/(d) \ e = 6 
e\r f (d)=6 



if e ^ 17(d) , 
if e ^ s/(d) , 



stop I e = S 
i\e = S . 
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used in the definition of the process extraction operation for extensions of BTA 
in which operators for thread-service interaction occur, see e.g. [8]. 

Let p be a closed term of BTA with guarded recursion. Then we say that \p\ 
is the process produced by p. 

The process extraction operation preserves the axioms of BTA with guarded 
recursion. Roughly speaking, this means that the translations of these axioms 
are derivable from the axioms of ACP r with guarded recursion. Before we make 
this fully precise, we have a closer look at the axioms of BTA with guarded 
recursion. 

A proper axiom is an equation or a conditional equation. In Table 1, we 
do not find proper axioms. Instead of proper axioms, we find axiom schemas 
without side conditions and axiom schemas with side conditions. The axioms of 
BTA with guarded recursion are obtained by replacing each axiom schema by 
all its instances. 

We define a function |_ | from the set of all equations and conditional equations 
of BTA with guarded recursion to the set of all equations of ACP T with guarded 
recursion as follows: 

\h = t 2 \ = \h\ = \t 2 \, 

\E^h=t 2 \ = {\t[\ = \t' 2 \ \t[ = t' 2 e E}^ |*i | = \t 2 \ . 

Proposition 1. Let cf) be an axiom o/BTA with guarded recursion. Then is 
derivable from the axioms of ACP r with guarded recursion. 

Proof. The proof is trivial. □ 

Proposition 1 would go through if no abstraction of the above-mentioned special 
termination action was made. Notice further that ACP r without the silent step 
constant and the abstraction operator, better known as ACP, would suffice if no 
abstraction of the special termination action was made. 



5 A Simple Protocol 

In this section, we consider a very simple transmission protocol for passing in- 
structions from a thread to a remote execution environment. 

At the location of the thread concerned, two atomic actions arc involved 
in performing a basic action: one for sending a message containing the basic 
action via a transmission channel to a receiver at the location of the execution 
environment and another for receiving a reply via a transmission channel from 
the receiver upon completion of the processing at the location of the execution 
environment. The receiver waits until a message containing a basic action can 
be received. Upon reception of a message containing a basic action /.m, the 
receiver sends a request to process command m to the service named / at the 
location of the execution environment. Next, the receiver waits until a reply from 
that service can be received. Upon reception of a reply, the receiver forwards the 
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Table 5. Process extraction for remotely controlled threads 



| -X' | ret — X" 
|S|rct = Si (Stop) 

| D | ret = si(dead) 

|*i < a> t 2 |rct = si (a) • (r 4 (T) • \ti\ TC t + • |fo|rct) 
\(X\E)\ rct = (X\ {Y = \t Y \ Ict \ Y = ty e E}) 

reply to the thread. Deadlocking and terminating are treated like performing 
basic actions. 

We write A' for the set A U {stop, dead}. 

For the purpose of describing the very simple transmission protocol outlined 
above in ACP r , A and | are taken such that, in addition to the conditions 
mentioned at the beginning of Section 4, the following conditions are satisfied: 

A d {s^d) | i e {l, 2} , d e A'} u {n(d) \ i e {l, 2} , d e A'} 

U {s,(r) |i£{3,4},reB}U{r 4 (r) | i e {3, 4} , r £ B} U {j} 
and for all i G {1, 2}, j G {3, 4}, d <E A\ r eM, and e G A: 

Si(d) |rj(d) =j , s,(r) |r,(r) =j , 

Sj(rf) | e = 5 if e 7^ rj(rf) , Sj(r) | e = 5 if e ^ r 3 (r) , 

e | Ti(d) = S if e 7^ Sj(d) , e\ij(r) = S if e 7^ Sj(r) , 

j I e = 5 . 

We introduce a process extraction operation |_| rct which determines, for each 
closed term p of BTA with guarded recursion, a closed term of ACP T with 
guarded recursion that denotes the process produced by the thread denoted by 
p in the case where the thread is remotely controlled. This operation is defined 
by the equations given in Table 5 (for a £ A). 

Let p be a closed term of BTA with guarded recursion. Then the process 
representing the remotely controlled thread p is described by 

d H (\p\ Ict || CHA || CHR || RCV) , 

where 

CHA = r i( d ) ' s 2(d) ■ CHA , 

deA' 

CHR = ^r 3 (r) • s 4 (r) • CHR , 

RCV= ]T r 2 (/.m)-s / (m)-(r / (T).S3(T) + r / (F).s 3 (F)). J RC7F 

f.meA' 

+ r 2 (stop) + r 2 (dead) • i • 6 
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and 

H = {si(d) 1 i e {l, 2} , d e A'} u {r 4 (d) | i e {1, 2} , d e .4'} 

U {s,(r) |ie{3,4},reB}U{r,(r) | i G {3, 4} , r G B} . 

CiL4 is the transmission channel for messages containing basic actions, CHR is 
the transmission channel for replies, and RCV is the receiver. 

If we abstract from all atomic actions for sending and receiving via the 
transmission channels CHA and CHR, then the processes denoted by \p\ and 
<9ir(|p|rct || CHA || CHR \\ RCV) are equal modulo an initial silent step. 

Theorem 1. For each closed term p o/BTA with guarded recursion: 

r ■ \p\ = r ■ r U} (d H (\pU II CHA || CHR || RCV)) . 
Proof. By AIP, it is sufficient to prove that for all n > 0: 

tt„(t • \p\) = TT n (r ■ T U} (d H (\p\rct || CHA || CHR || RCV))) . 

This is easily proved by induction on n and in the inductive step by case dis- 
tinction on the structure of p, using the axioms of ACP T and RDP. □ 

6 A More Complex Protocol 

In this section, we consider a more complex transmission protocol for passing 
instructions from a thread to a remote execution environment. 
The general idea of this protocol is that: 

— while the last basic action performed by the thread in question is processed 
at the location of the receiver, the first basic actions of the two ways in which 
the thread may proceed are transmitted together to the receiver; 

— while the choice between those two basic actions is made by the receiver on 
the basis of the reply produced at the completion of the processing, the reply 
is transferred to the thread. 

To simplify the description of the protocol, the following extensions of ACP 
from [1] will be used: 

— We will use conditionals. The expression p<\b\>q, is to be read as if b then 
p else q. The defining equations are 

i<Tt>y=i and x < F > y = y . 

— We will use the generalization of restricted early input action prefixing to 
process prefixing. Restricted early input action prefixing is defined by the 
equation erf(ii) ; t = ^2 deD r,(rf) • t[d/u\. We use the extension to processes 
to express binary parallel input: (erf 1 (ui) \\ er^ 2 (^2)) ; P ■ For this particular 
case, we have the following equation: 

(erf^) || erf'M) ;t= ]T n(di) ■ (erf 2 (« 2 ) ; tfa/m}) 

+ ^(d 2 )-(ev^( Ul );t[d 2 /u 2 }). 

d 2 eD 2 
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Table 6. Alternative process extraction for remotely controlled threads 



|-X{rct2 = X 
S| rct 2 = Si (Stop) 

|D| rct 2 = si (dead) 

|*i < a > t 2 \ Ict2 = si (a, init(ti), init(t 2 )) ■ {r A {T) ■ |ii|„t2 + 14(F) • *2 ]rct2) 

|<x|£;>| rct 2 = (x\ {Y = |ty| rct 2 \ Y = t Y e E}) 

|-^|rct2 = X 
|S|rct2 = Sl(void) 
|D|r ct2 = Si (void) 

|*i <a> t 2 \' Ict2 = si (init(ti),init(t 2 )) ■ (r 4 (T) ■ |ti|« t2 + r 4 (F) ■ |t 2 |rct2) 
\(X\E)\' Ict2 = {X\ {Y = \t Y \' Ict2 \Y = t Y € £}} 

init(S) — stop 
imi(D) = dead 
init(ti <a>t 2 ) = a 

init{{X\E)) = init({t x \E)) \fX = t x € £ 



We write ^ for tne set -4.' x 4', .A3 for the set .4 x A! x .4', and A" for the 
set _4 2 ' U A3 U {stop, dead, void}. 

For the purpose of describing the more complex transmission protocol out- 
lined above in ACP T , A and | are taken such that, in addition to the conditions 
mentioned at the beginning of Section 4, the following conditions are satisfied: 



A d { Sl (d) I i e {1,2}, de A"} u {r,(d) \ i g {1, 2} , d e A"} 

U {s,(r) |i£{3,4},reB}U{r 4 (r) | i G {3, 4} , r G B} U {j} 
and for all i G {1, 2}, j G {3, 4}, d £ 4", r G B, and e G A: 



We introduce a process extraction operation |_| rc t2 which determines, for 
each closed term p of BTA with guarded recursion, a closed term of ACP r with 
guarded recursion that denotes the process produced by the thread denoted by 
p in the case where the thread is remotely controlled by means of the alternative 
transmission protocol. This operation is defined by the equations given in Table 6 
(for a e A). 

Let p be a closed term of BTA with guarded recursion. Then the process 
representing the remotely controlled thread p is described by 



Si(d) | ii(d) = j 
Si(d) | e = S 
e | rj(d) = 5 



if e ^ Vi(d) , 
if e ^ Si(d) , 



Sj(r) | Tj(r) = j , 
Sj(r) \e = S 
e | Tj(r) = S 



if e ^ Tj(r) , 
if e^Sj(r) , 



d H (\p\rct2 || CHA 2 || Cffi? || RCV 8 ) 
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where 



CHA 2 = r i( d ) ' s ^ d ) ■ CHA % ' 

deA" 

CHR = ^r 3 (r) • s 4 (r) • CHR , 

RCV 2 = Y v 2 {f.m,a,a') -s/(m) 

(/.m,o,o')€^,' _ ( ^. (T) . rcv 2 (T, a) + r/(F) • flCV^F.a')) 
+ r 2 (stop) + r 2 (dead) • i • 5 , 

RCV' 2 (r,f.m) = (s 3 (r) || 8/ (m)) • flCV£' , 
#CVg(r,stop) =r 2 (void), 
RCV' 2 {r, dead) = r 2 (void) • i • 5 , 

flCV£ = (er^'(u,t;) || er»(/3)) ; {RCV^((3,u) <f3\> RCV' 2 {(5,v)) 



and 



ff = {s,(d) | i G {1,2}, de .4"} U {r t (d) | * G {1, 2} , d e .4"} 
U {s,(r) |iG{3,4},reB}U{r 4 (r) | i G {3, 4} , r G B} . 

Notice that the first cycle of the alternative transmission protocol differs 
fairly from all subsequent ones. This difference gives rise to a slight complication 
in the proof of Theorem 2 below. 

If we abstract from all atomic actions for sending and receiving via the 
transmission channels CHA 2 and CHR, then the processes denoted by \p\ and 
dn(\p\rct2 II CHA 2 || CHR \\ RCV 2 ) are equal modulo an initial silent step. 

Theorem 2. For each closed term p o/BTA with guarded recursion: 

r ■ \p\ = r ■ r U} (d H (\p\ Ict2 || CHA 2 || CHR || RCV 2 )) . 
Proof. By AIP, it is sufficient to prove that for all n > 0: 

tt„(t • \p\) = n n (r ■ m (d H (\pU 2 || CHA 2 \\ CHR || RCV 2 ))) . 

For n = 0, 1, 2, this is easily proved. For n > 3, it is easily proved in the cases 
p = S and p = D, but in the case p = p\ < f.m > p 2 we get: 

t • S/ (m) • (r f (T) ■ 7r n _ 2 (bi|) +r/(F) • 7r„_ 2 (|p 2 |)) 
= t ■ Sf(m) 

■ (r/(T) ■* n -2(T{ i }(d H Qpi\U2 II CHA 2 || CHR \\ RCV 2 (T, init{ Pl ))))) 
+ r/ (F) ■7r n - 2 (T {i} (d H (\p2\' Ict 2 II Ca* 2 II CHR || i2CVi(F,tm*(p2)))))) . 
We have that 

7r n . 2 ( m (d H (\p'\' Ict2 || CHA 2 || CTi? || iZCV^T.imtO/))))) 
= Kn-2{T m {d H {\p'\' Ict2 || CT^ 2 || CHR || iZCVi (F, imt(p'))))) 
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in the cases p' = S and p' = D, but not in the case p' = p[ < f'.m' >p' 2 . Therefore, 
we cannot prove 

tt„(t • \p\) = n n (r ■ r {j} (^(b| rct2 || CHA 2 \\ CHR \\ RCV 2 ))) 

by induction on n. However, in the case p' = p[ < f'.m' > p' 2 we have that 

I f (r)-K n - 2 (\P'\) 

= v f (r) ■ s f ,(m') ■ 7r„_ 3 (r / ,(T) • |KI + r^(F) • \p' 2 \) 

and 

rf(r)-TTn-2(T U} (d H (\p'\' Ict2 || CHA 2 || CHR \\ RCV' 2 {rJ'.m')))) 

= r/ (r) • s f ,(m>) ■ n n _ 3 (T U} (d H (\ P '\' rct2 \\ CHA 2 \\ CHR \\ RCV%))) . 

Therefore, it is sufficient to prove that for all closed terms p\ and p 2 of BTA 
with guarded recursion, / g T and m e M, for all n > 0: 

7r„(r. (v f (J).\ Pl \+v f (F)-\p 2 \)) 

= 7r n (r • r {j} (^(|pi <f-ml>p 2 \' Ict2 || CT^1 2 || CFi? || RCVg))) . 

This is easily proved by induction on n and in the inductive step by case dis- 
tinction on the structure of p\ and p 2 , using the axioms of ACP T , RDP and the 
axioms concerning process prefixing and conditionals given in [1] . □ 

7 Conclusions 

Using ACP r , we have described a very simple transmission protocol for pass- 
ing instructions from a thread to a remote execution environment and a more 
complex one that is more efficient, and we have verified the correctness of these 
protocols. In this way, we have clarified the phenomenon of remotely controlled 
program behaviours to a certain extent. 

One option for future work is to describe the protocols concerned in a version 
of ACP with discrete relative timing (see e.g. [2,3]) and then to show that the 
more complex one leads to a speed-up indeed. Another option for future work is 
to devise, describe and analyse more efficient protocols, such as protocols that 
allow for two or more instructions to be processed in parallel. 

By means of the protocols, we have presented a way to deal with the in- 
struction streams that turn up with remotely controlled program behaviours. 
By that we have ascribed a sense to the term instruction stream which makes 
clear that an instruction stream is dynamic by nature, in contradistinction with 
an instruction sequence. We have not yet been able to devise a basic definition 
of instruction streams. 
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